Your public key is usually located at ~/.ssh/id_ed25519.pub or ~/.ssh/id_rsa.pub
Linux/macOS:
cat ~/.ssh/id_ed25519.pub
Windows (PowerShell):
Get-Content $env:USERPROFILE\.ssh\id_ed25519.pub
If you need to generate a new key:
Run the following command in your terminal:
ssh-keygen -t ed25519 -C "your_email@lvairo.com"
Then press Enter to accept the default location, and optionally set a passphrase.
After generating, copy the contents of the .pub file (the public key) and paste it above.
Important: Only share your public key (.pub file). Never share your private key (the file without .pub extension).
Devices I Have Access To
Hostname
Description
Sync Status
My Agents
A personal agent (e.g. your nemo) runs as you.
Each agent gets its own SSH key and logs in as a dedicated, unprivileged account
(<you>_<agent>) on exactly the devices you can already reach.
A personal agent can never have more access than you do, and you can revoke it any time.
(Shared team agents, with label-based access, live in the Team Agents tab.)
Agent
Logs in as
Key
Source restriction
Actions
Add / Rotate an Agent Key
Generate a key on the agent's host
On the machine that runs the agent, create a dedicated keypair and paste the .pub here:
Keep the private key on the agent host only. Never reuse your personal key for an agent, and prefer setting a source restriction so a leaked key is useless elsewhere.
Team Agents
Team agents are shared nemo agents. They register themselves automatically
with no access; access is granted per label —
an agent can reach exactly the devices carrying its labels, as the unprivileged
account agent_<name>. You can attach or remove the labels
you have access to yourself (admins: any label). Changes apply
on the next deploy.
Agent
Logs in as
Key
Labels
Actions
Devices
Loading SSH configs...
Hostname
Description
Labels
Sync Status
Actions
Labels
Name
Groups with Access
Actions
Groups
Group membership is synced from Google Workspace. Set up a service account for automatic sync.
Name
Google Group Email
Members
Users
Name
Email
Has Public Key
Actions
Admin: View User Access
Hostname
Description
Sync Status
Admin: View Device Access
Users with Access
User
Email
Via Group
Has Key
Manage Device Labels
×
-
Labels
Add Label
×
Labels:
×
The agent can reach every device carrying one of these labels.
You can only attach labels you have access to yourself.
